6161 matches found
CVE-2021-24891-Simulation
A hands-on, containerized lab environment to simulate and exploit a DOM-based Cross-Site Scripting XSS vulnerability in the Elementor Website Builder WordPress plugin, identified as CVE-2021-24891. 📖 About The Vulnerability This lab demonstrates a DOM-based Cross-Site Scripting XSS vulnerability ...
CVE-2017-7038
CVE-2017-7038 Safari XSS CVE-2017-7038 https://support.apple.com/en-us/HT207923 Document implementation XSS vulnerability var payload = ''; document.createElement'body'.innerHTML = payload; document.implementation.createHTMLDocument.writepayload; new DOMParser.parseFromStringpayload, 'text/html';...
burp-dom-scanner
Burp DOM Scanner Burp Suite의 확장 프로그램으로, 단일 페이지 애플리케이션SPA의 재귀적 크롤링 및 스캔을 가능하게 합니다. Chromium 브라우저를 실행하여 웹페이지에서 DOM 기반 XSS를 스캔합니다. 또한 크롤링 중 발생하는 모든 요청XHR, fetch, websocket 등을 수집하여 Burp의 Proxy, Repeater 및 Intruder로 전달할 수 있습니다. Node.js와 DOMDig가 필요합니다. 다운로드 최신 릴리스는 여기에서 다운로드할 수 있습니다. 설치 1. Node.js 설치 2...
burp-dom-scanner
Burp DOM Scanner It's a Burp Suite's extension to allow for recursive crawling and scanning of Single Page Applications. It runs a Chromium browser to scan the webpage for DOM-based XSS. It can also collect all the requests XHR, fetch, websockets, etc issued during the crawling allowing them to b...
Yonyou U8 13.0 - Cross-Site Scripting
Yonyou U8 13.0 contains a DOM-based cross-site scripting vulnerability via the component /u8sl/WebHelp. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials...
VDO.Ninja - DOM-Based Cross-Site Scripting
VDO.Ninja 28.0 to 28.3 contains a reflected XSS caused by improper sanitization of the room parameter in examples/control.html, letting remote attackers execute scripts, exploit requires crafted URL. id: CVE-2025-62613 info: name: VDO.Ninja - DOM-Based Cross-Site Scripting author: 0xAkoko severit...
Hoppscotch <= 2026.2.1 - Open Redirect
Hoppscotch = 2026.2.1 is vulnerable to a DOM-based open redirect on the /enter page. The redirect query parameter is passed directly to windowz location.href with no origin validation. Requires one additional query parameter to trigger. Exploited via a crafted URL such as...
NoXss
NoXss NoXss is a cross-site script vulnerability scanner supported reflected xss and dom-based xss. It's very fast and suitable for testing millions of urls. It has found some xss vulnerabilities in Bug Bounty program. Features Fast and suitable for testing millions of urls Support Dom-based xssu...
CVE-2024-30956
CVE-2024-30956 참조 https://www.lauyan.com/en/toweb-updates.htmliyFEw37D DOM 기반 XSS TOWeb 버전 5 예: http://127.0.0.1:8000/message.html?==gC+QHcpJ3Yz9CPpcyUThFIkV2chJWLN9ERngCdyVGbh5DdwlmcjNHP URL로 이동하면 JS 코드가 실행됩니다. 참고: src에는 관련 HTML/JS 코드의 복사본이 포함되어 있습니다. TOWeb는 폐쇄 소스이며 비용을 지불하지 않고 이전 버전을 다운로드할 수 없기...
PoC-CVE-2024-24035
CVE-2024-24035 제목: SIL 3.1은 "hmessage" 매개변수에서 크로스 사이트 스크립팅XSS 취약점에 노출되어 있습니다. 날짜: 2024-01-14 작성자: Elizeu Das Dores 공급업체 홈페이지: https://www.setorinformatica.com/ 버전: 3.1 POC CVE-2024-24035 "hmessage" 매개변수는 DOM 기반 크로스 사이트 스크립팅XSS에 취약합니다...
WordPress All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin <= 5.0.1.1 - Reflected DOM-Based Cross-Site Scripting vulnerability
Reflected DOM-Based Cross-Site Scripting vulnerability discovered by mak3bread in WordPress Plugin All In One SEO Pack versions = 5.0.1.1...
WordPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin <= 4.4.7 - Reflected DOM-Based Cross-Site Scripting vulnerability
Reflected DOM-Based Cross-Site Scripting vulnerability discovered by Yuto Hyakumoto in WordPress Plugin LearnPress versions = 4.4.7...
WordPress Ivory Search – WordPress Search Plugin plugin <= 5.5.18 - Reflected DOM-Based Cross-Site Scripting vulnerability
Reflected DOM-Based Cross-Site Scripting vulnerability discovered by @nacento in WordPress Plugin Ivory Search versions = 5.5.18...
WordPress Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin <= 5.5.1.5 - Reflected DOM-Based Cross-Site Scripting vulnerability
Reflected DOM-Based Cross-Site Scripting vulnerability discovered by UKO in WordPress Plugin Calculated Fields Form versions = 5.5.1.5...
WordPress Visitor Traffic Real Time Statistics plugin <= 8.16 - Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability discovered by Kuba in WordPress Plugin Visitors Traffic Real Time Statistics versions = 8.16...
CVE-2021-42558
CVE-2021-42558: MITRE Caldera における複数のクロスサイトスクリプティング Caldera バージョン =2.8.1 には、認証済みおよび未認証の攻撃者によって悪用される可能性のある、複数の反射型、格納型、自己型XSS脆弱性が含まれています。 ベンダーの開示: この脆弱性に関するベンダーの開示はこちらでご覧いただけます。 要件: この脆弱性には以下が必要です: 一部のXSSは有効なユーザー認証情報を必要とします 概念実証: 詳細および悪用手順は、このPDFでご覧いただけます。 追加情報: XSSベクター「1.1...
CVE-2026-97341
The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'X-Real-IP' HTTP Header in all versions up to, and including, 8.16 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...
CVE-2026-103909
The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'arbitrary whichever names the admin bound via url.' parameter in all versions up to, and including, 5.5.1.5 due...
CVE-2026-103909
The Calculated Fields Form – AI Form Builder for WordPress plugin is vulnerable to Reflected DOM-Based Cross-Site Scripting (XSS) in all versions up to and including 5.5.1.5 . The flaw arises from insufficient input sanitization and output escaping within the arbitrary (whichever names the admin ...
EUVD-2026-91920
The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'X-Real-IP' HTTP Header in all versions up to, and including, 8.16 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...